PT-2026-140240

CVE-2026-115237

·

Published

2026-11-09

·

Updated

2026-11-09

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's password, allowing unauthenticated attackers to set the password of arbitrary accounts, including administrators, and fully take over the site.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2026-115237
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com